@duckmind/dm-windows-x64 0.61.4 → 0.61.9

package/extensions/dm-subagents/src/shared/utils.js

@@ -1,10 +1,20 @@
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { previewDisplayText, sanitizeDisplayText, truncateDisplayText } from "./display-text.js";
 import { formatToolCall } from "./formatters.js";
+import { validateAsyncStatusLaneMetadata } from "../runs/shared/lane-metadata.js";
 const DEFAULT_CONFIG_DIR_NAME = ".dm";
-const PI_CODING_AGENT_PACKAGE_NAME = "@duckmind/dm-coding-agent";
-export const PI_CODING_AGENT_PACKAGE_ROOT_ENV = "DM_SUBAGENTS_PI_CODING_AGENT_PACKAGE_ROOT";
+const DM_CODING_AGENT_PACKAGE_NAME = "@duckmind/dm-coding-agent";
+export const DM_CODING_AGENT_PACKAGE_ROOT_ENV = "DM_SUBAGENTS_DM_CODING_AGENT_PACKAGE_ROOT";
+export const PROMPT_REDACTED = "[prompt redacted]";
+export function resolveWatchPath(watchPath, nativeRealpath = fs.realpathSync.native) {
+  try {
+    return nativeRealpath(watchPath);
+  } catch {
+    return watchPath;
+  }
+}
 function validConfigDirName(value) {
   return typeof value === "string" && value.trim() ? value : undefined;
 }
@@ -13,14 +23,14 @@ function readConfigDirNameFromPackageRoot(packageRoot) {
     return;
   try {
     const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf-8"));
-    if (pkg.name !== PI_CODING_AGENT_PACKAGE_NAME)
+    if (pkg.name !== DM_CODING_AGENT_PACKAGE_NAME)
       return;
     return validConfigDirName(pkg.piConfig?.configDir);
   } catch {
     return;
   }
 }
-function resolveConfigDirNameFromPackageJson(entryPoint = process.argv[1], packageRoot = process.env[PI_CODING_AGENT_PACKAGE_ROOT_ENV]) {
+function resolveConfigDirNameFromPackageJson(entryPoint = process.argv[1], packageRoot = process.env[DM_CODING_AGENT_PACKAGE_ROOT_ENV]) {
   const packageRootValue = readConfigDirNameFromPackageRoot(packageRoot);
   if (packageRootValue)
     return packageRootValue;
@@ -41,21 +51,45 @@ export function resolveConfigDirName(codingAgentModule, entryPoint, packageRoot)
   const moduleValue = codingAgentModule && typeof codingAgentModule === "object" ? validConfigDirName(codingAgentModule.CONFIG_DIR_NAME) : undefined;
   return moduleValue ?? resolveConfigDirNameFromPackageJson(entryPoint, packageRoot) ?? DEFAULT_CONFIG_DIR_NAME;
 }
+let cachedConfigDirName;
 export function getConfigDirName() {
-  return resolveConfigDirName();
+  const entryPoint = process.argv[1];
+  const packageRoot = process.env[DM_CODING_AGENT_PACKAGE_ROOT_ENV];
+  if (cachedConfigDirName && cachedConfigDirName.entryPoint === entryPoint && cachedConfigDirName.packageRoot === packageRoot) {
+    return cachedConfigDirName.value;
+  }
+  const value = resolveConfigDirName(undefined, entryPoint, packageRoot);
+  cachedConfigDirName = { entryPoint, packageRoot, value };
+  return value;
 }
 export function getProjectConfigDir(projectRoot) {
   return path.join(projectRoot, getConfigDirName());
 }
 export function getAgentDir() {
   const configured = process.env.DM_CODING_AGENT_DIR;
+  const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
   if (configured === "~")
-    return os.homedir();
-  if (configured?.startsWith("~/"))
-    return path.join(os.homedir(), configured.slice(2));
-  return configured || path.join(os.homedir(), getConfigDirName(), "agent");
+    return home;
+  if (configured?.startsWith("~/") || configured?.startsWith("~\\"))
+    return path.join(home, configured.slice(2));
+  return configured || path.join(home, getConfigDirName(), "agent");
 }
 const statusCache = new Map;
+const MAX_STATUS_CACHE_ENTRIES = 512;
+export function pruneStatusCacheForAsyncRoot(asyncDirRoot, runIds) {
+  const root = path.resolve(asyncDirRoot);
+  const currentStatusPaths = new Set(Array.from(runIds, (runId) => path.resolve(root, runId, "status.json")));
+  let removed = 0;
+  for (const statusPath of statusCache.keys()) {
+    const resolved = path.resolve(statusPath);
+    const relative = path.relative(root, resolved);
+    if (relative && !relative.startsWith("..") && !path.isAbsolute(relative) && !currentStatusPaths.has(resolved)) {
+      statusCache.delete(statusPath);
+      removed++;
+    }
+  }
+  return removed;
+}
 function getErrorMessage(error) {
   return error instanceof Error ? error.message : String(error);
 }
@@ -73,22 +107,28 @@ export function readStatus(asyncDir) {
   try {
     stat = fs.statSync(statusPath);
   } catch (error) {
-    if (isNotFoundError(error))
+    if (isNotFoundError(error)) {
+      statusCache.delete(statusPath);
       return null;
+    }
     throw new Error(`Failed to inspect async status file '${statusPath}': ${getErrorMessage(error)}`, {
       cause: error instanceof Error ? error : undefined
     });
   }
   const cached = statusCache.get(statusPath);
-  if (cached && cached.mtime === stat.mtimeMs) {
+  if (cached && cached.mtime === stat.mtimeMs && cached.ctime === stat.ctimeMs && cached.size === stat.size && cached.ino === stat.ino) {
+    statusCache.delete(statusPath);
+    statusCache.set(statusPath, cached);
     return cached.status;
   }
   let content;
   try {
     content = fs.readFileSync(statusPath, "utf-8");
   } catch (error) {
-    if (isNotFoundError(error))
+    if (isNotFoundError(error)) {
+      statusCache.delete(statusPath);
       return null;
+    }
     throw new Error(`Failed to read async status file '${statusPath}': ${getErrorMessage(error)}`, {
       cause: error instanceof Error ? error : undefined
     });
@@ -101,52 +141,27 @@ export function readStatus(asyncDir) {
       cause: error instanceof Error ? error : undefined
     });
   }
-  statusCache.set(statusPath, { mtime: stat.mtimeMs, status });
-  if (statusCache.size > 50) {
-    const firstKey = statusCache.keys().next().value;
-    if (firstKey)
-      statusCache.delete(firstKey);
-  }
-  return status;
-}
-const outputTailCache = new Map;
-function getOutputTail(outputFile, maxLines = 3) {
-  if (!outputFile)
-    return [];
-  let fd = null;
   try {
-    const stat = fs.statSync(outputFile);
-    if (stat.size === 0)
-      return [];
-    const cached = outputTailCache.get(outputFile);
-    if (cached && cached.mtime === stat.mtimeMs && cached.size === stat.size) {
-      return cached.lines;
-    }
-    const tailBytes = 4096;
-    const start = Math.max(0, stat.size - tailBytes);
-    fd = fs.openSync(outputFile, "r");
-    const buffer = Buffer.alloc(Math.min(tailBytes, stat.size));
-    fs.readSync(fd, buffer, 0, buffer.length, start);
-    const content = buffer.toString("utf-8");
-    const allLines = content.split(`
-`).filter((l) => l.trim());
-    const lines = allLines.slice(-maxLines).map((l) => l.slice(0, 120) + (l.length > 120 ? "..." : ""));
-    outputTailCache.set(outputFile, { mtime: stat.mtimeMs, size: stat.size, lines });
-    if (outputTailCache.size > 20) {
-      const firstKey = outputTailCache.keys().next().value;
-      if (firstKey)
-        outputTailCache.delete(firstKey);
-    }
-    return lines;
-  } catch {
-    return [];
-  } finally {
-    if (fd !== null) {
-      try {
-        fs.closeSync(fd);
-      } catch {}
-    }
+    validateAsyncStatusLaneMetadata(status, `Invalid async status '${statusPath}'`);
+  } catch (error) {
+    throw new Error(`Failed to validate async status file '${statusPath}': ${getErrorMessage(error)}`, {
+      cause: error instanceof Error ? error : undefined
+    });
+  }
+  statusCache.set(statusPath, {
+    mtime: stat.mtimeMs,
+    ctime: stat.ctimeMs,
+    size: stat.size,
+    ino: stat.ino,
+    status
+  });
+  while (statusCache.size > MAX_STATUS_CACHE_ENTRIES) {
+    const oldest = statusCache.keys().next().value;
+    if (oldest === undefined)
+      break;
+    statusCache.delete(oldest);
   }
+  return status;
 }
 export function getLastActivity(outputFile) {
   if (!outputFile)
@@ -173,38 +188,35 @@ export function findLatestSessionFile(sessionDir) {
       mtime: fs.statSync(filePath).mtimeMs
     };
   }).sort((a, b) => b.mtime - a.mtime);
-  return files.length > 0 ? files[0].path : null;
-}
-function writePrompt(agent, prompt) {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "dm-subagent-"));
-  const p = path.join(dir, `${agent.replace(/[^\w.-]/g, "_")}.md`);
-  fs.writeFileSync(p, prompt, { mode: 384 });
-  return { dir, path: p };
+  const latest = files[0];
+  return latest ? latest.path : null;
 }
 export function getFinalOutput(messages) {
   const validTextParts = [];
   for (let i = messages.length - 1;i >= 0; i--) {
     const msg = messages[i];
-    if (msg.role !== "assistant")
+    if (!msg || msg.role !== "assistant")
       continue;
     const hasAssistantError = "errorMessage" in msg && typeof msg.errorMessage === "string" && msg.errorMessage.length > 0 || "stopReason" in msg && msg.stopReason === "error";
     if (hasAssistantError)
       continue;
+    const messageText = msg.content.filter((part) => part.type === "text" && part.text.trim().length > 0).map((part) => part.type === "text" ? part.text : "").join(`
+`);
     for (let j = msg.content.length - 1;j >= 0; j--) {
       const part = msg.content[j];
-      if (part.type !== "text" || part.text.trim().length === 0)
+      if (!part || part.type !== "text" || part.text.trim().length === 0)
         continue;
       validTextParts.push(part.text);
-      if (/```acceptance-report\s*\n[\s\S]*?```/i.test(part.text))
-        return part.text;
+      if (/```acceptance[-_]report\s*\n[\s\S]*?```/i.test(part.text))
+        return messageText;
       for (const match of part.text.matchAll(/```(?:json|jsonc|json5)\s*\n([\s\S]*?)```/gi)) {
         const body = match[1] ?? "";
-        if (/"criteriaSatisfied"/.test(body) && /"(?:changedFiles|testsAddedOrUpdated|commandsRun|validationOutput|residualRisks|noStagedFiles|diffSummary|reviewFindings|manualNotes)"/.test(body)) {
-          return part.text;
+        if (/"(?:criteriaSatisfied|criteria_satisfied)"/.test(body) && /"(?:changedFiles|changed_files|testsAddedOrUpdated|tests_added_or_updated|commandsRun|commands_run|validationOutput|validation_output|residualRisks|residual_risks|noStagedFiles|no_staged_files|diffSummary|diff_summary|reviewFindings|review_findings|manualNotes|manual_notes)"/.test(body)) {
+          return messageText;
         }
       }
       if (/ACCEPTANCE_REPORT\s*:/i.test(part.text))
-        return part.text;
+        return messageText;
     }
   }
   return validTextParts[0] ?? "";
@@ -234,9 +246,10 @@ function compactCompletedProgress(progress) {
   return {
     index: progress.index,
     agent: progress.agent,
+    ...progress.sessionName ? { sessionName: progress.sessionName } : {},
     status: progress.status,
     activityState: progress.activityState,
-    task: progress.task,
+    task: "[prompt redacted]",
     skills: progress.skills,
     toolCount: progress.toolCount,
     tokens: progress.tokens,
@@ -278,6 +291,16 @@ export function sumResultsUsage(results) {
   }
   return usage;
 }
+export function toAgentToolUsage(usage) {
+  return {
+    input: usage.input,
+    output: usage.output,
+    cacheRead: usage.cacheRead,
+    cacheWrite: usage.cacheWrite,
+    totalTokens: usage.input + usage.output + usage.cacheRead + usage.cacheWrite,
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: usage.cost }
+  };
+}
 function addNestedCost(total, children) {
   for (const child of children ?? []) {
     if (child.totalCost) {
@@ -307,6 +330,7 @@ export function compactForegroundResult(result) {
   const toolCalls = result.toolCalls?.length ? result.toolCalls : extractToolCallSummaries(result.messages);
   return {
     ...result,
+    task: "[prompt redacted]",
     messages: undefined,
     progress: undefined,
     toolCalls: toolCalls.length ? toolCalls : undefined
@@ -319,11 +343,38 @@ export function compactForegroundDetails(details) {
     progress: details.progress ? details.progress.map(compactCompletedProgress) : undefined
   };
 }
+export const MAX_STREAMED_RECENT_TOOLS = 32;
+export const MAX_STREAMED_TOOL_CALLS = 64;
+export const MAX_STREAMED_OUTPUT_LINE_CHARS = 2000;
+export function boundStreamedRecentTools(recentTools) {
+  return recentTools.slice(-MAX_STREAMED_RECENT_TOOLS).map((tool) => ({ ...tool }));
+}
+export function boundStreamedRecentOutput(recentOutput) {
+  return recentOutput.map((line) => line.length > MAX_STREAMED_OUTPUT_LINE_CHARS ? `${line.slice(0, MAX_STREAMED_OUTPUT_LINE_CHARS)}… [truncated]` : line);
+}
+export function boundStreamedToolCalls(result) {
+  const summaries = result.toolCalls?.length ? result.toolCalls : extractToolCallSummaries(result.messages);
+  if (!summaries.length)
+    return;
+  return summaries.slice(-MAX_STREAMED_TOOL_CALLS).map((summary) => ({ ...summary }));
+}
+export function hasEmptyTerminalAssistantResponse(messages) {
+  const lastAssistant = messages.findLast((message) => message.role === "assistant");
+  return lastAssistant?.role === "assistant" && Array.isArray(lastAssistant.content) && lastAssistant.content.length === 0 && lastAssistant.usage.output === 0;
+}
+export function formatEmptyTerminalAssistantResponseError(messages) {
+  const lastAssistant = messages.findLast((message) => message.role === "assistant");
+  const errorMessage = lastAssistant && "errorMessage" in lastAssistant && typeof lastAssistant.errorMessage === "string" && lastAssistant.errorMessage.trim() ? lastAssistant.errorMessage.trim() : undefined;
+  if (errorMessage)
+    return errorMessage;
+  const stopReason = lastAssistant && "stopReason" in lastAssistant && typeof lastAssistant.stopReason === "string" && lastAssistant.stopReason.trim() ? lastAssistant.stopReason.trim() : undefined;
+  return stopReason && stopReason !== "stop" ? `Subagent produced no output after terminal assistant stopReason "${stopReason}".` : "Subagent produced no output (possible model cold-start or empty response).";
+}
 export function detectSubagentError(messages) {
   let lastAssistantTextIndex = -1;
   for (let i = messages.length - 1;i >= 0; i--) {
     const msg = messages[i];
-    if (msg.role === "assistant") {
+    if (msg?.role === "assistant") {
       const hasText = Array.isArray(msg.content) && msg.content.some((c) => c.type === "text" && ("text" in c) && typeof c.text === "string" && c.text.trim().length > 0);
       if (hasText) {
         lastAssistantTextIndex = i;
@@ -334,57 +385,29 @@ export function detectSubagentError(messages) {
   const scanStart = lastAssistantTextIndex >= 0 ? lastAssistantTextIndex + 1 : 0;
   for (let i = messages.length - 1;i >= scanStart; i--) {
     const msg = messages[i];
-    if (msg.role !== "toolResult")
+    if (!msg || msg.role !== "toolResult")
       continue;
     const toolName = "toolName" in msg && typeof msg.toolName === "string" ? msg.toolName : undefined;
     const isError = "isError" in msg && msg.isError === true;
-    if (isError) {
-      const text = msg.content.find((c) => c.type === "text");
-      const details = text && "text" in text ? text.text : undefined;
-      const exitMatch = details?.match(/exit(?:ed)?\s*(?:with\s*)?(?:code|status)?\s*[:\s]?\s*(\d+)/i);
-      return {
-        hasError: true,
-        exitCode: exitMatch ? parseInt(exitMatch[1], 10) : 1,
-        errorType: toolName || "tool",
-        details: details?.slice(0, 200)
-      };
-    }
-    if (toolName !== "bash")
+    if (!isError)
       continue;
     const text = msg.content.find((c) => c.type === "text");
-    if (!text || !("text" in text))
-      continue;
-    const output = text.text;
-    const exitMatch = output.match(/exit(?:ed)?\s*(?:with\s*)?(?:code|status)?\s*[:\s]?\s*(\d+)/i);
-    if (exitMatch) {
-      const code = parseInt(exitMatch[1], 10);
-      if (code !== 0) {
-        return { hasError: true, exitCode: code, errorType: "bash", details: output.slice(0, 200) };
-      }
-    }
-    const fatalPatterns = [
-      /command not found/i,
-      /permission denied/i,
-      /no such file or directory/i,
-      /segmentation fault/i,
-      /killed|terminated/i,
-      /out of memory/i,
-      /connection refused/i,
-      /timeout/i
-    ];
-    for (const pattern of fatalPatterns) {
-      if (pattern.test(output)) {
-        return { hasError: true, exitCode: 1, errorType: "bash", details: output.slice(0, 200) };
-      }
-    }
+    const details = text && "text" in text ? text.text : undefined;
+    const exitMatch = details?.match(/exit(?:ed)?\s*(?:with\s*)?(?:code|status)?\s*[:\s]?\s*(\d+)/i);
+    const exitCodeText = exitMatch?.[1];
+    return {
+      hasError: true,
+      exitCode: exitCodeText ? parseInt(exitCodeText, 10) : 1,
+      errorType: toolName || "tool",
+      details: details?.slice(0, 200)
+    };
   }
   return { hasError: false };
 }
 export function extractToolArgsPreview(args) {
-  const truncatePreview = (value, maxLength) => value.length > maxLength ? `${value.slice(0, maxLength - 3)}...` : value;
   const stringifyPreviewValue = (value) => {
     if (typeof value === "string" && value.trim().length > 0)
-      return value;
+      return sanitizeDisplayText(value);
     if (typeof value === "number" || typeof value === "boolean")
       return String(value);
     return;
@@ -398,40 +421,37 @@ export function extractToolArgsPreview(args) {
     const suffix = value.length > 1 ? ` (+${value.length - 1} more)` : "";
     return `${first}${suffix}`;
   };
-  if (args.tool && typeof args.tool === "string") {
-    const server = args.server && typeof args.server === "string" ? `${args.server}/` : "";
-    const toolArgs = args.args && typeof args.args === "string" ? ` ${args.args.slice(0, 40)}` : "";
-    return `${server}${args.tool}${toolArgs}`;
+  if (typeof args.tool === "string") {
+    const server = typeof args.server === "string" ? `${sanitizeDisplayText(args.server)}/` : "";
+    const toolArgs = typeof args.args === "string" ? ` ${truncateDisplayText(sanitizeDisplayText(args.args), 40)}` : "";
+    return sanitizeDisplayText(`${server}${args.tool}${toolArgs}`);
   }
   const queriesPreview = previewArray(args.queries);
   if (queriesPreview)
-    return truncatePreview(queriesPreview, 60);
+    return previewDisplayText(queriesPreview, 60);
   if (typeof args.query === "string" && args.query.trim().length > 0)
-    return truncatePreview(args.query, 60);
+    return previewDisplayText(args.query, 60);
   if (typeof args.workflow === "string" && args.workflow.trim().length > 0)
-    return `workflow=${truncatePreview(args.workflow, 48)}`;
+    return `workflow=${previewDisplayText(args.workflow, 48)}`;
   if (typeof args.url === "string" && args.url.trim().length > 0)
-    return truncatePreview(args.url, 60);
+    return previewDisplayText(args.url, 60);
   const urlsPreview = previewArray(args.urls);
   if (urlsPreview)
-    return truncatePreview(urlsPreview, 60);
+    return previewDisplayText(urlsPreview, 60);
   if (typeof args.prompt === "string" && args.prompt.trim().length > 0)
-    return truncatePreview(args.prompt, 60);
+    return previewDisplayText(args.prompt, 60);
   const previewKeys = ["command", "path", "file_path", "pattern", "query", "url", "task", "describe", "search"];
   for (const key of previewKeys) {
-    if (args[key] && typeof args[key] === "string") {
-      const value = args[key];
-      return truncatePreview(value, 60);
-    }
+    if (typeof args[key] === "string")
+      return previewDisplayText(args[key], 60);
   }
   for (const [key, value] of Object.entries(args)) {
+    const displayKey = sanitizeDisplayText(key);
     const arrayPreview = previewArray(value);
     if (arrayPreview)
-      return `${key}=${truncatePreview(arrayPreview, 50)}`;
-    if (typeof value === "string" && value.length > 0) {
-      const preview = truncatePreview(value, 50);
-      return `${key}=${preview}`;
-    }
+      return `${displayKey}=${previewDisplayText(arrayPreview, 50)}`;
+    if (typeof value === "string" && value.length > 0)
+      return `${displayKey}=${previewDisplayText(value, 50)}`;
   }
   return "";
 }

package/extensions/dm-subagents/src/shared/watch-strategy.js

@@ -0,0 +1,3 @@
+export function shouldUseNativeFsWatch(_purpose, platform = process.platform) {
+  return platform !== "darwin";
+}

package/extensions/dm-subagents/src/shared/workflow-child-permit.js

@@ -0,0 +1,84 @@
+import { stableJsonDigest } from "./launch-contract.js";
+const records = new WeakMap;
+function projectionDigest(input) {
+  return stableJsonDigest({
+    version: 1,
+    childKey: input.childKey,
+    agent: input.agent,
+    launchContractDigest: input.launchContractDigest,
+    context: input.context,
+    runner: input.runner
+  });
+}
+function required(value, label) {
+  if (!value.trim() || value !== value.trim())
+    throw new Error(`${label} must be a non-empty trimmed string.`);
+  return value;
+}
+export function createWorkflowChildPermit(input) {
+  const permit = Object.freeze(Object.create(null));
+  const record = {
+    issuerPackage: required(input.issuerPackage, "issuerPackage"),
+    workflowRunId: required(input.workflowRunId, "workflowRunId"),
+    childKey: required(input.childKey, "childKey"),
+    agent: required(input.agent, "agent"),
+    expectedProjectionDigest: projectionDigest({
+      childKey: input.childKey,
+      agent: input.agent,
+      launchContractDigest: required(input.launchContractDigest, "launchContractDigest"),
+      context: input.context,
+      runner: "dm"
+    }),
+    state: "available"
+  };
+  records.set(permit, record);
+  return permit;
+}
+export function validateWorkflowChildPermitRoot(permit, workflowRunId) {
+  const record = records.get(permit);
+  if (!record)
+    return "Workflow child permit is invalid.";
+  if (record.state !== "available")
+    return "Workflow child permit is already consumed.";
+  if (record.workflowRunId !== workflowRunId)
+    return "Workflow child permit does not match this workflow root.";
+  return;
+}
+export function claimWorkflowChildPermit(permit, workflowRunId, childKey) {
+  const record = records.get(permit);
+  if (!record)
+    return "Workflow child permit is invalid.";
+  if (record.state !== "available")
+    return "Workflow child permit is already consumed.";
+  if (record.workflowRunId !== workflowRunId)
+    return "Workflow child permit does not match this workflow root.";
+  record.state = record.childKey === childKey ? "claimed" : "consumed";
+  if (record.childKey !== childKey)
+    return "Workflow child permit child key mismatch.";
+  return;
+}
+export function consumeWorkflowChildPermit(permit, launch) {
+  const record = records.get(permit);
+  if (!record)
+    return "Workflow child permit is invalid.";
+  if (record.state === "available")
+    return "Workflow child permit launch was not claimed.";
+  if (record.state === "consumed")
+    return "Workflow child permit is already consumed.";
+  if (record.workflowRunId !== launch.workflowRunId)
+    return "Workflow child permit does not match this workflow root.";
+  record.state = "consumed";
+  if (record.childKey !== launch.childKey)
+    return "Workflow child permit child key mismatch.";
+  if (record.agent !== launch.agent)
+    return "Workflow child permit agent mismatch.";
+  if (launch.runner !== "dm")
+    return "Workflow child permit supports native DM children only.";
+  if (record.expectedProjectionDigest !== projectionDigest(launch))
+    return "Workflow child permit does not match the final launch projection.";
+  return;
+}
+export function workflowChildPermitConsumed(permit) {
+  const state = records.get(permit)?.state;
+  return state === "claimed" || state === "consumed";
+}